uclient-fetch: only add default CA entries if no certificate was supplied and verify...

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

diff --git a/uclient-fetch.c b/uclient-fetch.c
index 914bdcc..8d03c3d 100644 (file)
--- a/uclient-fetch.c
+++ b/uclient-fetch.c
@@ -410,7 +410,7 @@ int main(int argc, char **argv)
                return 1;
        }
 
-       if (ssl_ctx)
+       if (ssl_ctx && default_certs)
                init_ca_cert();
 
        rc = init_request(cl);